Security Advisory

CVE-2026-8985

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-21 21:11:25

Last updated 2026-07-22 19:37:37

Assigner CyberDanube

CVSS score 10.0

State PUBLISHED

Description

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply crafted input in the url parameter to execute arbitrary operating system commands.

← Browse all CVEs View on cve.org ↗